Commit Diff


commit - ea27eaaa83d61792e75858dc624c58fe1fa13dc9
commit + 1a04137e1869781efcd635a1abd4387ccfa6e56d
blob - 662d14560b1205ca4dac23a29c761dbaa7662e87
blob + ac8104e8a6faf3b166cf29bcb72a45563354935c
--- configure
+++ configure
@@ -34,7 +34,7 @@ echo "file config.log: writing..."
 # default settings: initialize all vars here such that nothing is
 # leaked from the environment except for CC, CFLAGS and LDFLAGS
 
-VERSION=1.8.2
+VERSION=1.8.3
 
 CC=`printf "all:\\n\\t@echo \\\$(CC)\\n" | make ${MAKE_FLAGS} -sf -`
 
blob - 53c01f662f3f88c7e30d805026eff946bc9b3b77
blob + 383ef562dbd8cfd7d331afd4092cabea29c8be5a
--- gmid.1
+++ gmid.1
@@ -579,7 +579,7 @@ The port the server is listening on.
 .Dq GEMINI
 .It Ev SERVER_SOFTWARE
 The name and version of the server, i.e.
-.Dq gmid/1.8.2
+.Dq gmid/1.8.3
 .It Ev AUTH_TYPE
 The string "Certificate" if the client used a certificate, otherwise
 unset.
blob - 9ad99b57e9538391f7027bc01dd47bc626ab76a3
blob + 1ba405c422eb9479ddc9df1729d662ee8f7bd32d
--- site/changelog.gmi
+++ site/changelog.gmi
@@ -1,5 +1,12 @@
 # change log
 
+## 2022/03/27 - 1.8.3 “Lightbulb Sun” bugfix release
+
+### Bug fixes
+
+* fix a possible out-of-bound access in the CGI handling.  It was introduced last October during a refactoring, but due to how many malloc(3) implementations works this hasn't been found until now.  Otto' malloc is more strict fortunately.
+
+
 ## 2022/03/26 - 1.8.2 “Lightbulb Sun” bugfix release
 
 ### Bug fixes